密码编码学与网络安全_课后习题答案(全)

（完整）密码编码学与网络安全(第五版)英文答案编辑整理：尊敬的读者朋友们：这里是精品文档编辑中心，本文档内容是由我和我的同事精心编辑整理后发布的，发布之前我们对文中内容进行仔细校对，但是难免会有疏漏的地方，但是任然希望（（完整）密码编码学与网络安全(第五版)英文答案）的内容能够给您的工作和学习带来便利。

同时也真诚的希望收到您的建议和反馈，这将是我们进步的源泉，前进的动力。

本文可编辑可修改，如果觉得对您有帮助请收藏以便随时查阅，最后祝您生活愉快业绩进步，以下为（完整）密码编码学与网络安全(第五版)英文答案的全部内容。

1.3 Passive attacks: release of message contents and traffic analysis。

Active attacks：masquerade, replay， modification of messages， and denial of service。

1.4 Authentication：The assurance that the communicating entity is theone that it claims to be。

Access control：The prevention of unauthorized use of a resource （i。

e.， this service controls who can have access to a resource, under what conditions access can occur， and what those accessing the resource are allowed to do）.Data confidentiality：The protection of data from unauthorizeddisclosure。

Data integrity：The assurance that data received are exactly as sent by an authorized entity (i.e., contain no modification, insertion, deletion， or replay）.Nonrepudiation：Provides protection against denial by one of the entities involved in a communication of having participated in all or part of the communication.Availability service：The property of a system or a system resource being accessible and usable upon demand by an authorized systementity， according to performance specifications for the system （i。

第二章2.1什么是对称密码的本质成分？Plaintext, encryption algorithm, secret key, ciphertext, decryption algorithm.明文加密算法密钥密文解密算法2.2 密码算法中两个基本函数式什么？Permutation and substitution.代换和置换P202.3用密码进行通信的两个人需要多少密钥？对称密码只需要一把，非对称密码要两把P202.4 分组密码和流密码的区别是什么？A stream cipher is one that encrypts a digital data stream one bit or one byte at a time. A block cipher is one in which a block of plaintext is treated as a whole and used to produce a ciphertext block of equal length.分组密码每次输入的一组元素，相应地输出一组元素。

流密码则是连续地处理输入元素，每次输出一个元素。

P202.5攻击密码的两种一般方法是什么？Cryptanalysis and brute force.密码分析和暴力破解2.6列出并简要定力基于攻击者所知道信息的密码分析攻击类型。

Ciphertext only. One possible attack under these circumstances is the brute-force approach of trying all possible keys. If the key space is very large, this becomes impractical. Thus, the opponent must rely on an analysis of the ciphertext itself, generally applying various statistical tests to it.Known plaintext.The analyst may be able to capture one or more plaintext messages as well as their encryptions. With this knowledge, the analyst may be able to deduce the key on the basis of the way in which the known plaintext is transformed.Chosen plaintext. If the analyst is able to choose the messages to encrypt, the analyst may deliberately pick patterns that can be expected to reveal the structure of the key.惟密文已知明文选择明文2.7无条件安全密码和计算上安全密码的区别是什么？An encryption scheme is unconditionally secure if the ciphertext generated by the scheme does not contain enough information to determine uniquely the corresponding plaintext, no matter how much ciphertext is available. An encryption scheme is said to be computationally secure if: (1) the cost of breaking the cipher exceeds the value of the encrypted information, and (2) the time required to break the cipher exceeds the useful lifetime of the information.书本P212.8简要定义Caesar密码The Caesar cipher involves replacing each letter of the alphabet with the letter standing k places further down the alphabet, for k in the range 1 through 25.书本P222.9简要定义单表代换密码A monoalphabetic substitution cipher maps a plaintext alphabet to a ciphertext alphabet, so that each letter of the plaintext alphabet maps to a single unique letter of the ciphertext alphabet.书本P232.10简要定义Playfair密码The Playfair algorithm is based on the use of a 5 5 matrix of letters constructed using a keyword. Plaintext is encrypted two letters at a time using this matrix.书本P262.11单表代换密码和夺标代换密码的区别是什么？A polyalphabetic substitution cipher uses a separate monoalphabetic substitution cipher for each successive letter of plaintext, depending on a key.书本P302.12一次一密的两个问题是什么？1. There is the practical problem of making large quantities of random keys. Any heavily usedsystem might require millions of random characters on a regular basis. Supplying truly random characters in this volume is a significant task.2. Even more daunting is the problem of key distribution and protection. For every message to be sent, a key of equal length is needed by both sender and receiver. Thus, a mammoth key distribution problem exists.书本P332.13什么是置换密码？A transposition cipher involves a permutation of the plaintext letters. 书本P332.14什么是隐写术？Steganography involves concealing the existence of a message.书本P362.7.3习题 2.1a.对b 的取值是否有限制？解释原因。

第二章2.1什么是对称密码的本质成分？Plaintext, encryption algorithm, secret key, ciphertext, decryption algorithm.明文加密算法密钥密文解密算法2.2 密码算法中两个基本函数式什么？Permutation and substitution.代换和置换P202.3用密码进行通信的两个人需要多少密钥？对称密码只需要一把，非对称密码要两把P202.4 分组密码和流密码的区别是什么？A stream cipher is one that encrypts a digital data stream one bit or one byte at a time. A block cipher is one in which a block of plaintext is treated as a whole and used to produce a ciphertext block of equal length.分组密码每次输入的一组元素，相应地输出一组元素。

流密码则是连续地处理输入元素，每次输出一个元素。

P202.5攻击密码的两种一般方法是什么？Cryptanalysis and brute force.密码分析和暴力破解2.6列出并简要定力基于攻击者所知道信息的密码分析攻击类型。

Ciphertext only. One possible attack under these circumstances is the brute-force approach of trying all possible keys. If the key space is very large, this becomes impractical. Thus, the opponent must rely on an analysis of the ciphertext itself, generally applying various statistical tests to it.Known plaintext.The analyst may be able to capture one or more plaintext messages as well as their encryptions. With this knowledge, the analyst may be able to deduce the key on the basis of the way in which the known plaintext is transformed.Chosen plaintext. If the analyst is able to choose the messages to encrypt, the analyst may deliberately pick patterns that can be expected to reveal the structure of the key.惟密文已知明文选择明文2.7无条件安全密码和计算上安全密码的区别是什么？An encryption scheme is unconditionally secure if the ciphertext generated by the scheme does not contain enough information to determine uniquely the corresponding plaintext, no matter how much ciphertext is available. An encryption scheme is said to be computationally secure if: (1) the cost of breaking the cipher exceeds the value of the encrypted information, and (2) the time required to break the cipher exceeds the useful lifetime of the information.书本P212.8简要定义Caesar密码The Caesar cipher involves replacing each letter of the alphabet with the letter standing k places further down the alphabet, for k in the range 1 through 25.书本P222.9简要定义单表代换密码A monoalphabetic substitution cipher maps a plaintext alphabet to a ciphertext alphabet, so that each letter of the plaintext alphabet maps to a single unique letter of the ciphertext alphabet.书本P232.10简要定义Playfair密码The Playfair algorithm is based on the use of a 55 matrix of letters constructed using a keyword. Plaintext is encrypted two letters at a time using this matrix.书本P262.11单表代换密码和夺标代换密码的区别是什么？A polyalphabetic substitution cipher uses a separate monoalphabetic substitution cipher for each successive letter of plaintext, depending on a key.书本P302.12一次一密的两个问题是什么？1. There is the practical problem of making large quantities of random keys. Any heavily used system mightrequire millions of random characters on a regular basis. Supplying truly random characters in this volume is a significant task.2. Even more daunting is the problem of key distribution and protection. For every message to be sent, a key of equal length is needed by both sender and receiver. Thus, a mammoth key distribution problem exists.书本P332.13什么是置换密码？A transposition cipher involves a permutation of the plaintext letters.书本P332.14什么是隐写术？Steganography involves concealing the existence of a message.书本P362.1a.对b的取值是否有限制？解释原因。

In troduct ion 5Classical Encryp tio n Tech niq ues ........Block Cip hers and the Date Encryp ti on Stan dard .... Fi nite FieldsAdva need Encryp ti on Stan dard ........... More on Symmetric Cip hers ................ Con fide ntiality Using Symmetric Encryp ti on In troducti on to Number Theory ........... P ublic-Key Cryp togra phy and RSA .........Key Man ageme nt; Other P ublic-Key Cryp tosystems Message Authe nticati on and Hash Fun cti ons ..............................Hash and MAC Algorithms ...................Digital Sign atures and Authe nticati on P rotocols Authe nticatio n App lications ...........................................Electr onic Mail Security .................IP Security ...............................Web Security .............................Intruders ................................Malicious Software ........................Firewalls .................................A NSWERS TO Q UI S'TIO NSThe OSI Security Architecture is a framework that p rovides a systematic way of defi ning the requirements for security and characteriz ing the app roaches to satisfy ing those requireme nts. The docume ntdefi nes security attacks, mecha ni sms, and services, and the relatio nships among these categories. Passive attacks have to do with eavesdropping on, or monitoring, transmissions. Electro nic mail, file tran sfers, and clie nt/server excha nges are exa mples of transmissions that can be monitored. Activeattacks include the modification of tran smitted data and attem pts to gai n un authorized access tocompu ter systems.Passive attacks: release of message contents and traffic analysis. Active attacks:masquerade, re play, modificatio n of messages, and denial of service.Authe nticati on: The assura nee that the com muni cati ng en tity is the one that it claims to be. Access con trol: The p reve nti on of un authorized use of a resource (i.e., this service con trols who can have access to a resource, un der what con diti ons access can occur, and what the access ing the resource are allowed to do).Data con fide ntiality: The p rotecti on of data from un authorized disclosure.Data integrity: The assuranee that data received are exactly as sent by an authorized entity (i.e., contain no modificati on, in serti on, deleti on, or rep lay).Nonrepudiation: Provides protection against denial by one of the entities involved in a communicationCha pter 1: Cha pter 2: Cha pter 3: Cha pter 4: Chap ter 5: Cha pter 6: Cha pter 7: Cha pter 8: Cha pter 9: Cha pter 10: Cha pter 11: Cha pter 12: Cha pter 13: Cha pter 14: Cha pter 15: Cha pter 16: Cha pter 17: Cha pter 18: Cha pter 19: Cha pter 20:.......7 ..13 ..... 21 ....28 .....33 38 .... 42 ...46 .......55 (59)....62 ... (66)■ ...71 . (73) (76) (80) (83) (87) (89)1.1 1.2 1.3 1.4seof having participated in all or part of the communication.Availability service: The property of a system or a system resource being accessible and usable upon demand by an authorized system entity, according to performance specifications for the system (i.e., a system is available if it provides services according to the system design whenever users request them).1.5 See Table 1.3.。

Access control: The prevention of unauthorized use of a resource (i.e., this service controls who can have access to a resource, under what conditions access can occur, and what those accessing the resource are allowed to do).Data confidentiality: The protection of data from unauthorized disclosure.Data integrity: The assurance that data received are exactly as sent by an authorized entity (i.e., contain no modification, insertion, deletion, or replay).Nonrepudiation: Provides protection against denial by one of the entities involved in a communication of having participated in all or part of the communication.Availability service: The property of a system or a system resource being accessible and usable upon demand by an authorized system entity, according to performance specifications for the system (i.e., a system is available if it provides services according to the system design whenever users request them).1.5 See Table 1.3.2.1 Plaintext, encryption algorithm, secret key, ciphertext, decryptionalgorithm.2.2 Permutation and substitution.2.3 One key for symmetric ciphers, two keys for asymmetric ciphers.2.4 A stream cipher is one that encrypts a digital data stream one bit or one byteat a time. A block cipher is one in which a block of plaintext is treated as a whole and used to produce a ciphertext block of equal length.2.5 Cryptanalysis and brute force.2.6 Ciphertext only . One possible attack under these circumstances is thebrute-force approach of trying all possible keys. If the key space is very large, this becomes impractical. Thus, the opponent must rely on an analysis of the ciphertext itself, generally applying various statistical tests to it. Known plaintext. The analyst may be able to capture one or more plaintext messages as well as their encryptions. With this knowledge, the analyst may be able to deduce the key on the basis of the way in which the known plaintext is transformed. Chosen plaintext. If the analyst is able to choose the messages to encrypt, the analyst may deliberately pick patterns that can be expected to reveal the structure of the key.2.7 An encryption scheme is unconditionally secure if the ciphertext generatedby the scheme does not contain enough information to determine uniquely the corresponding plaintext, no matter how much ciphertext is available. An encryption scheme is said to be computationally secure if: (1) the cost of breaking the cipher exceeds the value of the encrypted information, and (2) the time required to break the cipher exceeds the useful lifetime of the information.C HAPTER 2C LASSICAL E NCRYPTION T ECHNIQUESR2.8 The Caesar cipher involves replacing each letter of the alphabet with theletter standing k places further down the alphabet, for k in the range 1 through25.2.9 A monoalphabetic substitution cipher maps a plaintext alphabet to a ciphertextalphabet, so that each letter of the plaintext alphabet maps to a single unique letter of the ciphertext alphabet.2.10 The Playfair algorithm is based on the use of a 5 5 matrix of lettersconstructed using a keyword. Plaintext is encrypted two letters at a time using this matrix.2.11 A polyalphabetic substitution cipher uses a separate monoalphabeticsubstitution cipher for each successive letter of plaintext, depending on a key.2.12 1. There is the practical problem of making large quantities of random keys.Any heavily used system might require millions of random characters on a regular basis. Supplying truly random characters in this volume is asignificant task.2. Even more daunting is the problem of key distribution and protection. Forevery message to be sent, a key of equal length is needed by both sender and receiver. Thus, a mammoth key distribution problem exists.2.13 A transposition cipher involves a permutation of the plaintext letters.2.14 Steganography involves concealing the existence of a message.A NSWERS TO P ROBLEMS2.1 a. No. A change in the value of b shifts the relationship between plaintextletters and ciphertext letters to the left or right uniformly, so that if the mapping is one-to-one it remains one-to-one.b. 2, 4, 6, 8, 10, 12, 13, 14, 16, 18, 20, 22, 24. Any value of a larger than25 is equivalent to a mod 26.c. The values of a and 26 must have no common positive integer factor otherthan 1. This is equivalent to saying that a and 26 are relatively prime, or that the greatest common divisor of a and 26 is 1. To see this, first note that E(a, p) = E(a, q) (0 ≤ p≤ q< 26) if and only if a(p–q) is divisible by 26. 1. Suppose that a and 26 are relatively prime. Then, a(p–q) is not divisible by 26, because there is no way to reduce the fractiona/26 and (p–q) is less than 26. 2. Suppose that a and 26 have a common factor k> 1. Then E(a, p) = E(a, q), if q = p + m/k≠ p.2.2 There are 12 allowable values of a (1, 3, 5, 7, 9, 11, 15, 17, 19, 21, 23,25). There are 26 allowable values of b, from 0 through 25). Thus the totalnumber of distinct affine Caesar ciphers is 12 26 = 312.2.3 Assume that the most frequent plaintext letter is e and the second most frequentletter is t. Note that the numerical values are e = 4; B = 1; t = 19; U = 20.Then we have the following equations:1 = (4a + b) mod 2620 = (19a + b) mod 26Thus, 19 = 15a mod 26. By trial and error, we solve: a = 3.Then 1 = (12 + b) mod 26. By observation, b = 15.2.4 A good glass in the Bishop's hostel in the Devil's seat—twenty-one degreesand thirteen minutes—northeast and by north—main branch seventh limb east side—shoot from the left eye of the death's head— a bee line from the tree through the shot fifty feet out. (from The Gold Bug, by Edgar Allan Poe)2.5 a. The first letter t corresponds to A, the second letter h corresponds toB, e is C, s is D, and so on. Second and subsequent occurrences of a letter in the key sentence are ignored. The resultciphertext: SIDKHKDM AF HCRKIABIE SHIMC KD LFEAILAplaintext: basilisk to leviathan blake is contactb. It is a monalphabetic cipher and so easily breakable.c. The last sentence may not contain all the letters of the alphabet. If thefirst sentence is used, the second and subsequent sentences may also be used until all 26 letters are encountered.2.6The cipher refers to the words in the page of a book. The first entry, 534,refers to page 534. The second entry, C2, refers to column two. The remaining numbers are words in that column. The names DOUGLAS and BIRLSTONE are simply words that do not appear on that page. Elementary! (from The Valley of Fear, by Sir Arthur Conan Doyle)2.7 a.2 8 10 7 9 63 14 5C R Y P T O G A H I4 2 8 1056 37 1 9ISRNG BUTLF RRAFR LIDLP FTIYO NVSEE TBEHI HTETAEYHAT TUCME HRGTA IOENT TUSRU IEADR FOETO LHMETNTEDS IFWRO HUTEL EITDSb. The two matrices are used in reverse order. First, the ciphertext is laidout in columns in the second matrix, taking into account the order dictated by the second memory word. Then, the contents of the second matrix are read left to right, top to bottom and laid out in columns in the first matrix, taking into account the order dictated by the first memory word. Theplaintext is then read left to right, top to bottom.c. Although this is a weak method, it may have use with time-sensitiveinformation and an adversary without immediate access to good cryptanalysis(e.g., tactical use). Plus it doesn't require anything more than paper andpencil, and can be easily remembered.2.8 SPUTNIK2.9 PT BOAT ONE OWE NINE LOST IN ACTION IN BLACKETT STRAIT TWO MILES SW MERESU COVEX CREW OF TWELVE X REQUEST ANY INFORMATION。

第一章绪论1.1.1、计算机网络面临的主要威胁：①计算机网络实体面临威胁（实体为网络中的关键设备）②计算机网络系统面临威胁（典型安全威胁）③恶意程序的威胁（如计算机病毒、网络蠕虫、间谍软件、木马程序）④计算机网络威胁的潜在对手和动机（恶意攻击/非恶意）2、典型的网络安全威胁：①窃听②重传③伪造④篡改⑤非授权访问⑥拒绝服务攻击⑦行为否认⑧旁路控制⑨电磁/射频截获⑩人员疏忽1.2.1计算机网络的不安全主要因素：（1）偶发因素：如电源故障、设备的功能失常及软件开发过程中留下的漏洞或逻辑错误等。

（2）自然灾害：各种自然灾害对计算机系统构成严重的威胁。

（3）人为因素：人为因素对计算机网络的破坏也称为人对计算机网络的攻击。

可分为几个方面：①被动攻击②主动攻击③邻近攻击④内部人员攻击⑤分发攻击1.2.2不安全的主要原因：①互联网具有不安全性②操作系统存在的安全问题③数据的安全问题④传输线路安全问题⑤网络安全管理的问题1.3计算机网络安全的基本概念：计算机网络安全是一门涉及计算机科学、网络技术、通信技术、密码技术、信息安全技术、应用数学、数论和信息论等多学科的综合性学科。

1.3.1计算机网络安全的定义：计算机网络安全是指利用管理控制和技术措施，保证在一个网络环境里，信息数据的机密性、完整性及可使用性受到保护。

网络的安全问题包括两方面内容：一是网络的系统安全；二是网络的信息安全（最终目的）。

1.3.2计算机网络安全的目标：①保密性②完整性③可用性④不可否认性⑤可控性1.3.3计算机网络安全的层次：①物理安全②逻辑安全③操作系统安全④联网安全1.3.4网络安全包括三个重要部分：①先进的技术②严格的管理③威严的法律1.4计算机网络安全体系结构1.4.1网络安全基本模型：(P27图)1.4.2OSI安全体系结构：①术语②安全服务③安全机制五大类安全服务，也称安全防护措施（P29）：①鉴别服务②数据机密性服务③访问控制服务④数据完整性服务⑤抗抵赖性服务1.4.3PPDR模型(P30)包含四个主要部分：Policy(安全策略)、Protection(防护)、Detection(检测)和Response(响应)。

计算机网络安全（04751）第一章绪论 P2第二章物理安全 P6第三章信息加密与 P9第四章防火墙技术 P14第五章入侵检测技术 P18第六章网络安全检测技术 P21第七章计算机病毒与恶意代码防范技术 P23第八章网络安全解决方案 P27第1章绪论1.1.1计算机网络面临的主要威胁：/非恶意）典型的网络安全威胁：1.2.1计算机网络的不安全主要因素：（1误等。

（2（3可分为几个方面：①被动攻击②主动攻击③邻近攻击④分发攻击⑤内部人员攻击1.2.2不安全的主要原因1.3计算机网络安全的基本概念1.3.1计算机网络安全的定义网络的安全问题包括两方面内容：的）。

1.3.2计算机网络安全的目标：①保密性②完整性③可用性④可控性⑤不可否认性1.3.3计算机网络安全的层次：①物理安全②逻辑安全③联网安全④操作系统安全1.3.4网络安全包括三个重要部分：①先进的技术②严格的管理③威严的法律1.4计算机网络安全体系结构1.4.1网络安全基本模型：(P27图)1.4.2 OSI安全体系结构：①术语②安全服务③安全机制五大类安全服务，也称安全防护措施（P29）：①鉴别服务②数据机密性服务③访问控制服务④数据完整性服务⑤抗抵赖性服务对付典型网络威胁的安全服务安全威胁安全服务假冒攻击鉴别服务非授权侵犯访问控制服务窃听攻击数据机密性服务完整性破坏数据完整性服务服务否认抗抵赖服务拒绝服务鉴别服务、访问控制服务和数据完整性服务等八种基本的安全机制：加密机制、数字签名机制、访问控制机制、数据完整性机制、鉴别交换机制、通信业务流填充机制、路由控制和公证机制1.4.3 PPDR模型(P30)包含四个主要部分：Policy(安全策略)、Protection(防护)、Detection(检测)和Response(响应)。

防护、检测和响应组成了一个完整的、动态的安全循环。

PPDR模型通过一些典型的数学公式来表达安全的要求：①P t>D t+R t②E t=D t+R t，如果P t＝0Pt：防护时间，入侵者攻击安全目标花费时间；Dt：入侵开始到系统检测到入侵行为花费时间；Rt：发现入侵到响应，并调整系统到正常状态时间；Et：系统晨露时间；安全的全新定义：及时的检测和响应就是安全；及时的检测和恢复就是安全；解决安全问题的方向：提高系统的防护时间Pt，降低检测时间Dt和响应时间Rt。

第二章2.1什么是对称密码的本质成分？Plaintext, encryption algorithm, secret key, ciphertext, decryption algorithm.明文加密算法密钥密文解密算法2.2 密码算法中两个基本函数式什么？Permutation and substitution.代换和置换P202.3用密码进行通信的两个人需要多少密钥？对称密码只需要一把，非对称密码要两把P202.4 分组密码和流密码的区别是什么？A stream cipher is one that encrypts a digital data stream one bit or one byte at a time. A block cipher is one in which a block of plaintext is treated as a whole and used to produce a ciphertext block of equal length.分组密码每次输入的一组元素，相应地输出一组元素。

流密码则是连续地处理输入元素，每次输出一个元素。

P202.5攻击密码的两种一般方法是什么？Cryptanalysis and brute force.密码分析和暴力破解2.6列出并简要定力基于攻击者所知道信息的密码分析攻击类型。

Ciphertext only. One possible attack under these circumstances is the brute-force approach of trying all possible keys. If the key space is very large, this becomes impractical. Thus, the opponent must rely on an analysis of the ciphertext itself, generally applying various statistical tests to it.Known plaintext.The analyst may be able to capture one or more plaintext messages as well as their encryptions. With this knowledge, the analyst may be able to deduce the key on the basis of the way in which the known plaintext is transformed.Chosen plaintext. If the analyst is able to choose the messages to encrypt, the analyst may deliberately pick patterns that can be expected to reveal the structure of the key.惟密文已知明文选择明文2.7无条件安全密码和计算上安全密码的区别是什么？An encryption scheme is unconditionally secure if the ciphertext generated by the scheme does not contain enough information to determine uniquely the corresponding plaintext, no matter how much ciphertext is available. An encryption scheme is said to be computationally secure if: (1) the cost of breaking the cipher exceeds the value of the encrypted information, and (2) the time required to break the cipher exceeds the useful lifetime of the information.书本P212.8简要定义Caesar密码The Caesar cipher involves replacing each letter of the alphabet with the letter standing k places further down the alphabet, for k in the range 1 through 25.书本P222.9简要定义单表代换密码A monoalphabetic substitution cipher maps a plaintext alphabet to a ciphertext alphabet, so that each letter of the plaintext alphabet maps to a single unique letter of the ciphertext alphabet.书本P232.10简要定义Playfair密码The Playfair algorithm is based on the use of a 5?5 matrix of letters constructed using a keyword. Plaintext is encrypted two letters at a time using this matrix.书本P262.11单表代换密码和夺标代换密码的区别是什么？A polyalphabetic substitution cipher uses a separate monoalphabetic substitution cipher for each successive letter of plaintext, depending on a key.书本P302.12一次一密的两个问题是什么？1. There is the practical problem of making large quantities of random keys. Any heavily used system mightrequire millions of random characters on a regular basis. Supplying truly random characters in this volume is a significant task.2. Even more daunting is the problem of key distribution and protection. For every message to be sent, a key of equal length is needed by both sender and receiver. Thus, a mammoth key distribution problem exists.书本P332.13什么是置换密码？A transposition cipher involves a permutation of the plaintext letters.书本P332.14什么是隐写术？Steganography involves concealing the existence of a message.书本P362.1a.对b的取值是否有限制？解释原因。

《密码编码学与网络安全》复习题1．信息安全（计算机安全）目标是什么？机密性（confidentiality）：防止未经授权的信息泄漏完整性（integrity）：防止未经授权的信息篡改可用性（avialbility）：防止未经授权的信息和资源截留抗抵赖性、不可否认性、问责性、可说明性、可审查性（accountability）：真实性（authenticity）：验证用户身份2．理解计算安全性(即one-time pad的理论安全性)使用与消息一样长且无重复的随机密钥来加密信息，即对每个明文每次采用不同的代换表不可攻破，因为任何明文和任何密文间的映射都是随机的，密钥只使用一次3．传统密码算法的两种基本运算是什么？代换和置换前者是将明文中的每个元素映射成另外一个元素；后者是将明文中的元素重新排列。

4．流密码和分组密码区别是什么？各有什么优缺点？分组密码每次处理一个输入分组，对应输出一个分组；流密码是连续地处理输入元素，每次输出一个元素流密码Stream: 每次加密数据流的一位或者一个字节。

连续处理输入分组，一次输出一个元素，速度较快。

5．利用playfair密码加密明文bookstore，密钥词是（HARPSICOD），所得的密文是什么？I/JD RG LR QD HGHARPS bo ok st or ex I/JD DG PU GO GVI/JCODBEFGKLMNQTUVWXYZ6．用密钥词cat实现vigenere密码，加密明文vigenere coper，所得的密文是什么？XIZGNXTEVQPXTKey: catca t ca tcatcatcatPlaintext: vigenere coperChipertext: XIZGNXTE VQPXT7．假定有一个密钥2431的列置换密码，则明文can you understand的密文是多少？YNSDCODTNURNAUEAKey: 2 4 3 1Plaintext: c a n yo u u nd e r st a n dChipertext: YNSDCODTNURNAUEA8．什么是乘积密码？多步代换和置换，依次使用两个或两个以上的基本密码，所得结果的密码强度将强与所有单个密码的强度.9．混淆和扩散的区别是什么？扩散（Diffusion):明文的统计结构被扩散消失到密文的,使得明文和密文之间的统计关系尽量复杂.即让每个明文数字尽可能地影响多个密文数字混淆(confusion)：使得密文的统计特性与密钥的取值之间的关系尽量复杂，阻止攻击者发现密钥10．Feistel密码中每轮发生了什么样的变化？将输入分组分成左右两部分。

密码编码学与网络安全课后习题答案全Document number【SA80SAB-SAA9SYT-SAATC-SA6UT-SA18】密码编码学与网络安全（全）什么是OSI安全体系结构？OSI安全体系结构是一个架构，它为规定安全的要求和表征满足那些要求的途径提供了系统的方式。

该文件定义了安全攻击、安全机理和安全服务，以及这些范畴之间的关系。

被动安全威胁和主动安全威胁之间的差别是什么？被动威胁必须与窃听、或监控、传输发生关系。

电子邮件、文件的传送以及用户/服务器的交流都是可进行监控的传输的例子。

主动攻击包括对被传输的数据加以修改，以及试图获得对计算机系统未经授权的访问。

验证：保证通信实体之一，它声称是。

访问控制：防止未经授权使用的资源（即，谁可以拥有对资源的访问，访问在什么条件下可能发生，那些被允许访问的资源做这个服务控制）。

数据保密：保护数据免受未经授权的披露。

数据完整性：保证接收到的数据是完全作为经授权的实体（即包含任何修改，插入，删除或重播）发送。

不可否认性：提供保护反对否认曾参加全部或部分通信通信中所涉及的实体之一。

可用性服务：系统属性或访问和经授权的系统实体的需求，可用的系统资源，根据系统（即系统是可用的，如果它提供服务，根据系统设计，只要用户要求的性能指标它们）。

第二章1.什么是对称密码的本质成分？明文、加密算法、密钥、密文、解密算法。

4.分组密码和流密码的区别是什么？流密码是加密的数字数据流的一个位或一次一个字节。

块密码是明文块被视为一个整体，用来产生一个相同长度的密文块......分组密码每次处理输入的一组分组，相应的输出一组元素。

流密码则是连续地处理输入元素，每次输出一个元素。

6.列出并简要定义基于攻击者所知道信息的密码分析攻击类型。

惟密文攻击：只知道要解密的密文。

这种攻击一般是试遍所有可能的密钥的穷举攻击，如果密钥空间非常大，这种方法就不太实际。

因此攻击者必须依赖于对密文本身的分析，这一般要运用各种统计方法。

第一章绪论1.1.1、计算机网络面临的主要威胁：①计算机网络实体面临威胁（实体为网络中的关键设备）②计算机网络系统面临威胁（典型安全威胁）③恶意程序的威胁（如计算机病毒、网络蠕虫、间谍软件、木马程序）④计算机网络威胁的潜在对手和动机（恶意攻击/非恶意）2、典型的网络安全威胁：①窃听②重传③伪造④篡改⑤非授权访问⑥拒绝服务攻击⑦行为否认⑧旁路控制⑨电磁/射频截获⑩人员疏忽1.2.1计算机网络的不安全主要因素：（1）偶发因素：如电源故障、设备的功能失常及软件开发过程中留下的漏洞或逻辑错误等。

（2）自然灾害：各种自然灾害对计算机系统构成严重的威胁。

（3）人为因素：人为因素对计算机网络的破坏也称为人对计算机网络的攻击。

可分为几个方面：①被动攻击②主动攻击③邻近攻击④内部人员攻击⑤分发攻击1.2.2不安全的主要原因：①互联网具有不安全性②操作系统存在的安全问题③数据的安全问题④传输线路安全问题⑤网络安全管理的问题1.3计算机网络安全的基本概念：计算机网络安全是一门涉及计算机科学、网络技术、通信技术、密码技术、信息安全技术、应用数学、数论和信息论等多学科的综合性学科。

1.3.1计算机网络安全的定义：计算机网络安全是指利用管理控制和技术措施，保证在一个网络环境里，信息数据的机密性、完整性及可使用性受到保护。

网络的安全问题包括两方面内容：一是网络的系统安全；二是网络的信息安全（最终目的）。

1.3.2计算机网络安全的目标：①保密性②完整性③可用性④不可否认性⑤可控性1.3.3计算机网络安全的层次：①物理安全②逻辑安全③操作系统安全④联网安全1.3.4网络安全包括三个重要部分：①先进的技术②严格的管理③威严的法律1.4计算机网络安全体系结构1.4.1网络安全基本模型：(P27图)1.4.2OSI安全体系结构：①术语②安全服务③安全机制五大类安全服务，也称安全防护措施（P29）：①鉴别服务②数据机密性服务③访问控制服务④数据完整性服务⑤抗抵赖性服务1.4.3PPDR模型(P30)包含四个主要部分：Policy(安全策略)、Protection(防护)、Detection(检测)和Response(响应)。

Nonrepudiation: Provides protection against denial by one of the entities involved in a communication of having participated in all or part of the communication.Availability service: The property of a system or a system resource being accessible and usable upon demand by an authorized system entity, according to performancespecifications for the system (i.e., a system is available if it provides services according to the system design whenever users request them).1.5 See Table 1.3.C HAPTER 2C LASSICAL E NCRYPTION T ECHNIQUESR2.1 Plaintext, encryption algorithm, secret key, ciphertext, decryption algorithm.2.2 Permutation and substitution.2.3 One key for symmetric ciphers, two keys for asymmetric ciphers.2.4 A stream cipher is one that encrypts a digital data stream one bit or one byte at atime. A block cipher is one in which a block of plaintext is treated as a whole and used to produce a ciphertext block of equal length.2.5 Cryptanalysis and brute force.2.6 Ciphertext only. One possible attack under these circumstances is the brute-forceapproach of trying all possible keys. If the key space is very large, this becomes impractical. Thus, the opponent must rely on an analysis of the ciphertext itself, generally applying various statistical tests to it. Known plaintext. The analyst may be able to capture one or more plaintext messages as well as their encryptions.With this knowledge, the analyst may be able to deduce the key on the basis of the way in which the known plaintext is transformed. Chosen plaintext. If the analyst is able to choose the messages to encrypt, the analyst may deliberately pickpatterns that can be expected to reveal the structure of the key.2.7 An encryption scheme is unconditionally secure if the ciphertext generated by thescheme does not contain enough information to determine uniquely thecorresponding plaintext, no matter how much ciphertext is available. Anencryption scheme is said to be computationally secure if: (1) the cost of breaking the cipher exceeds the value of the encrypted information, and (2) the timerequired to break the cipher exceeds the useful lifetime of the information.2.8 The Caesar cipher involves replacing each letter of the alphabet with the letterstanding k places further down the alphabet, for k in the range 1 through 25.2.9 A monoalphabetic substitution cipher maps a plaintext alphabet to a ciphertextalphabet, so that each letter of the plaintext alphabet maps to a single unique letter of the ciphertext alphabet.2.10 The Playfair algorithm is based on the use of a 5 5 matrix of letters constructedusing a keyword. Plaintext is encrypted two letters at a time using this matrix.2.11 A polyalphabetic substitution cipher uses a separate monoalphabetic substitutioncipher for each successive letter of plaintext, depending on a key.2.12 1. There is the practical problem of making large quantities of random keys. Anyheavily used system might require millions of random characters on a regularbasis. Supplying truly random characters in this volume is a significant task.2. Even more daunting is the problem of key distribution and protection. For everymessage to be sent, a key of equal length is needed by both sender and receiver.Thus, a mammoth key distribution problem exists.2.13 A transposition cipher involves a permutation of the plaintext letters.2.14 Steganography involves concealing the existence of a message.2.1 a. No. A change in the value of b shifts the relationship between plaintext lettersand ciphertext letters to the left or right uniformly, so that if the mapping isone-to-one it remains one-to-one.不，在b值变化之间的关系和明文字母转换密文字母到左或右一致，所以，如果映射是一对一的它仍然是一对一的。

密码编码学与网络安全（全）1.1 什么是 OSI 安全体系结构？OSI 安全体系结构是一个架构，它为规定安全的要求和表征满足那些要求的途径提供了系统的方式。

该文件定义了安全攻击、安全机理和安全服务，以及这些范畴之间的关系。

1.2 被动安全威胁和主动安全威胁之间的差别是什么？被动威胁必须与窃听、或监控、传输发生关系。

电子邮件、文件的传送以及用户 /服务器的交流都是可进行监控的传输的例子。

主动攻击包括对被传输的数据加以修改，以及试图获得对计算机系统未经授权的访问。

1.4 验证：保证通信实体之一，它声称是。

访问控制：防止未经授权使用的资源（即，谁可以拥有对资源的访问，访问在什么条件下可能发生，那些被允许访问的资源做这个服务控制）。

数据保密：保护数据免受未经授权的披露。

数据完整性：保证接收到的数据是完全作为经授权的实体（即包含任何修改，插入，删除或重播）发送。

不可否认性：提供保护反对否认曾参加全部或部分通信通信中所涉及的实体之一。

可用性服务：系统属性或访问和经授权的系统实体的需求，可用的系统资源，根据系统（即系统是可用的，如果它提供服务，根据系统设计，只要用户要求的性能指标它们）。

第二章1.什么是对称密码的本质成分？明文、加密算法、密钥、密文、解密算法。

4.分组密码和流密码的区别是什么？流密码是加密的数字数据流的一个位或一次一个字节。

块密码是明文块被视为一个整体，用来产生一个相同长度的密文块 ......分组密码每次处理输入的一组分组，相应的输出一组元素。

流密码则是连续地处理输入元素，每次输出一个元素。

6.列出并简要定义基于攻击者所知道信息的密码分析攻击类型。

惟密文攻击：只知道要解密的密文。

这种攻击一般是试遍所有可能的密钥的穷举攻击，如果密钥空间非常大，这种方法就不太实际。

因此攻击者必须依赖于对密文本身的分析，这一般要运用各种统计方法。

已知明文攻击：分析者可能得到一个或多个明文消息，以及它们的密文。

有了这些信息，分析者能够在已知明文加密方式的基础上推导出某些关键词。

密码学与网络安全答案密码学是一门研究如何保护信息安全的学科，它广泛应用于网络安全领域。

网络安全是保护网络系统免受未经授权的访问、破坏、窃取和干扰的措施。

密码学在网络安全中起到至关重要的作用，提供了许多重要的技术和算法来保护数据和通信的机密性、完整性和可用性。

首先，密码学提供了一种加密方法，即将明文转化为密文，以保护数据的机密性。

加密算法有许多种，如对称加密和非对称加密。

对称加密使用相同的密钥进行加密和解密，比如DES和AES算法。

非对称加密使用公钥加密和私钥解密，比如RSA算法。

通过使用加密方法，即使攻击者获得了密文，也无法轻易破解，从而保护了数据的安全性。

其次，密码学还提供了一种验证和认证方法，以确保数据的完整性和真实性。

数字签名是一种常用的认证技术，它使用非对称密钥加密算法，通过在信息上附加一个数字签名来证明发送者的身份。

同时，数字签名也可以保证信息的完整性，因为一旦信息被篡改，数字签名就会无效。

此外，还有其他技术，如消息认证码（MAC）和哈希函数，可以验证数据的完整性和真实性。

此外，密码学还提供了一些密码协议和安全协议，用于在网络通信中保护数据的机密性和完整性。

比如，安全套接层（SSL）和传输层安全（TLS）协议用于在客户端和服务器之间建立安全通信，防止中间人攻击和数据窃听。

另一个例子是虚拟私有网络（VPN），它提供了一种安全的远程访问网络的方法，通过加密和隧道技术来保护数据和通信的安全。

除了上述的技术和方法，密码学还包括密码学分析和密码破解技术，以及密码理论的研究。

密码学分析是指破解密码算法和系统，以发现其弱点和漏洞。

密码破解技术是指尝试通过猜测、穷举和其他方法获取密码的过程。

密码理论则研究密码学的基本原理和概念，以及构建安全密码系统的方法和原则。

综上所述，密码学在网络安全领域起着重要的作用。

它通过提供加密、验证和认证技术，保护数据和通信的机密性、完整性和可用性。

密码学还提供了一些密码协议和安全协议，用于保护网络通信的安全性。

第一章二填空题1 网络系统的（）性是指保证网络系统不因素的影响而中断正常工作。

可靠性2 数据的（）性是指在保证软件和数据完整性的同时，还要能使其被正常利用和操作。

可用性3 网络攻击主要有（）攻击和（）攻击两大类。

被动、主动4 网络威胁主要来自认为影响和外部（）的影响，它们包括对网络设备的威胁和对（）的威胁。

自然环境、网络中信息矚慫润厲钐瘗睞枥庑赖。

5 被动攻击的特点是偷听或监视传送，其墓地是获得（）。

信息内容或信息的长度、传输频率等特征6 某些人或者某些组织想方设法利用网络系统来获取相应领域的敏感信息，这种威胁属于（）威胁。

故意7 软、硬件的机能失常、认为误操作、管理不善而引起的威胁属于（）威胁。

无意8 使用特殊级数对系统进行攻击，以便得到有针对性的信息就是一种（）攻击。

主动9 数据恢复操作的种类有（）、（）和重定向恢复。

全盘恢复、个别文件恢复三选择题1 入侵者通过观察网络线路上的信息，而不干扰信息的正常流动，如搭线窃听或非授权地阅读信息，这事属于（）。

A聞創沟燴鐺險爱氇谴净。

A 被动攻击B 主动攻击C 无意威胁D 系统缺陷2 入侵者对传书中的信息或者存储的信息进行各种非法处理，如有选择地个该、插入、延迟、删除或者复制这些信息，这是属于（）。

B残骛楼諍锩瀨濟溆塹籟。

A 无意威胁B 主动攻击C 系统缺陷D 漏洞威胁3 入侵者利用操作系统存在的后门进入系统进行非法操作，这样的威胁属于（）A 被动攻击B 无意威胁C 系统缺陷D窃取威胁 C4 软件错误、文件损坏、数据交换错误、操作系统错误等是影响数据完整性的（）原因。

BA 人为因素B 软件和数据故障C 硬件故障D 网络故障5 磁盘故障、I/O控制器故障、电源故障、存储器故障、芯片和主板故障是影响数据完整性的（）原因。

DA 人为因素B 软件故障C网络故障 D 硬件故障6 属于通信系统与通信协议的脆弱性的是（）。

CA 介质的剩磁效应B 硬件和软件故障C TCP/IP漏洞D 数据库分级管理7 属于计算机系统本身的脆弱性的是（）AA 硬件和软件故障B 介质的剩磁效应C TCP/IP漏洞D 数据库分级管理8 网络系统面临的威胁主要是来自（1）（）影响，这些威胁大致可分为（2）（）两大类。

Availability service: The property of a system or a system resource being accessible and usable upon demand by an authorized system entity, according to performancespecifications for the system (i.e., a system is available if it provides services according to the system design whenever users request them).1.5 See Table 1.3.Notarization Y Y YChapter 2Classical Encryption TechniquesrA NSWERS TO Q UESTIONS2.1 Plaintext, encryption algorithm, secret key, ciphertext, decryption algorithm.2.2 Permutation and substitution.2.3 One key for symmetric ciphers, two keys for asymmetric ciphers.2.4 A stream cipher is one that encrypts a digital data stream one bit or one byte at atime. A block cipher is one in which a block of plaintext is treated as a whole and used to produce a ciphertext block of equal length.2.5 Cryptanalysis and brute force.2.6 Ciphertext only. One possible attack under these circumstances is the brute-forceapproach of trying all possible keys. If the key space is very large, this becomes impractical. Thus, the opponent must rely on an analysis of the ciphertext itself, generally applying various statistical tests to it. Known plaintext. The analyst may be able to capture one or more plaintext messages as well as their encryptions.With this knowledge, the analyst may be able to deduce the key on the basis of the way in which the known plaintext is transformed. Chosen plaintext. If the analyst is able to choose the messages to encrypt, the analyst may deliberately pickpatterns that can be expected to reveal the structure of the key.2.7 An encryption scheme is unconditionally secure if the ciphertext generated by thescheme does not contain enough information to determine uniquely thecorresponding plaintext, no matter how much ciphertext is available. Anencryption scheme is said to be computationally secure if: (1) the cost of breaking the cipher exceeds the value of the encrypted information, and (2) the timerequired to break the cipher exceeds the useful lifetime of the information.2.8 The Caesar cipher involves replacing each letter of the alphabet with the letterstanding k places further down the alphabet, for k in the range 1 through 25.2.9 A monoalphabetic substitution cipher maps a plaintext alphabet to a ciphertextalphabet, so that each letter of the plaintext alphabet maps to a single unique letter of the ciphertext alphabet.2.10 The Playfair algorithm is based on the use of a 5 5 matrix of letters constructedusing a keyword. Plaintext is encrypted two letters at a time using this matrix. 2.11 A polyalphabetic substitution cipher uses a separate monoalphabetic substitutioncipher for each successive letter of plaintext, depending on a key.2.12 1. There is the practical problem of making large quantities of random keys. Anyheavily used system might require millions of random characters on a regularbasis. Supplying truly random characters in this volume is a significant task.2. Even more daunting is the problem of key distribution and protection. For everymessage to be sent, a key of equal length is needed by both sender and receiver.Thus, a mammoth key distribution problem exists.2.13 A transposition cipher involves a permutation of the plaintext letters.2.14 Steganography involves concealing the existence of a message.2.1 a. No. A change in the value of b shifts the relationship between plaintext lettersand ciphertext letters to the left or right uniformly, so that if the mapping isone-to-one it remains one-to-one.不，在b值变化之间的关系和明文字母转换密文字母到左或右一致，所以，如果映射是一对一的它仍然是一对一的。